Why when deploying an image that was collected from a machine with all updates are there still updates to install after deployment?

Before we sysprep and collect an image we make sure that all updates are installed on the pc used for collection, this includes office updates as well. Upon finishing the deployment of the image 36 updates are required to be installed most of these are for office. At first we thought it may have been sysprep getting rid of these updates but ruled that out when we started up the computer we collected from after sysprep and it had all the updates still installed. Anyone have any idea as to why these updates are not being collected with the rest of the image. This happens with both a kimage and a wim-image.

We are not currently, we have a test instance of WSUS that we are planning on using in the near future, and we know that we wont be able to get all updates with a image because of the speed at which Microsoft releases updates, however all current updates should be on the collected image, at least the ones that were on the pc we collected from but on deployment they are not

We did not hide any updates on the master, the 36 updates that it claims it needs are for office 2013. there is one for silverlight and a couple windows security updates, I will need to apply another image to get the exact ones for you.

sounds like you have everything correct. Only thought is to try to clear the updates on the master so it looks at all of them again.

On the master:
Go to C:\Windows\SoftwareDistribution\Download and delete every file and folder in there. Then go to C:\Windows\SoftwareDistribution\DataStore and delete the datastore.edb file. If you have any trouble deleting the files, stop B.I.T.S. and windows update services.

Answers

0

It is not documented, but Sysprep does clear the Windows Update history. So the next question is why do only some updates get re-installed while others do not? The answer is it depends (got to love it).

Windows updates check for updates in several ways. One is through checking files directly and another is through installed programs that you can see under Add Removed programs and another is via the Windows Update History. The 36 patches that you see may be checking if they were installed only by checking the success/fail from the Windows Update history and now that it is gone the patches redeploy.

Now the next question is how do I get an image that has every patch available up to this second? I do not have an answer, just advice - Don't kill yourself trying because it probably is not going to happen.

if this was the case wouldn't the original pc, the one we captured the image from and performed sysprep on, be missing the 36 updates as well after we turn the pc back on? Because even after we sysprep that pc still has all the updates.

You could of course try capturing the installation of updates so that you can determine where the update history is held. Then take a backup of it, sysprep, and have a first run setting that puts the update history back. Have never tried this but there should be some way of cranking this. Alternatively, don't bother installing all the updates - just let it happen post deployment.